Posted 16 days ago
Threat and Vulnerability Management Analyst
@ Astra North Infoteck Inc.
Brampton, Ontario
Overview
Astra North Infoteck Inc. is hiring a contract Threat and Vulnerability Management Analyst in Brampton, ON, on a hybrid arrangement with 2-3 days a week in the office. The role runs vulnerability scans across infrastructure, endpoints, servers, network devices, applications and cloud, validates and prioritizes findings, tracks remediation against SLAs, and reports metrics to executives. The posting asks for 6-8 years of experience.
Responsibilities:
- Run and monitor vulnerability scans across infrastructure, cloud and applications
- Validate findings and prioritize them by severity and business impact
- Coordinate remediation with technology teams and track SLAs
- Produce dashboards, metrics and executive reports
Requirements summary:
- 3+ years in vulnerability management or information security
- Hands-on experience with Qualys, Tenable/Nessus or Rapid7
- Knowledge of CVSS, CVE, CWE and CPE
- Understanding of patch management and enterprise infrastructure
- Strong communication and stakeholder management skills
Tools & skills
Source and dates
Source type not verified · zoho
- Employer posting date
- 2026-10-21
- First seen by our source
- 2026-10-22
- Source record updated
- 2026-10-22
These dates describe the source record, not a live verification that the employer is still hiring. Check the original posting.
Job details
| Seniority | Mid level |
| Department | IT |
| Experience | 6+ years |
| Travel | air: none · ground: none |
| Work setting | Office |
| Position | Mostly sitting |
| Physical demands | physical low · computer high |
| Languages | English |
Summary and details written by AI from the posting; the employer’s posting is the authority.
Astra North Infoteck Inc.
| Field | Value |
|---|---|
| Open jobs on Jobsy | 426 |
Threat and Vulnerability Management Analyst
Skills: Cyber Security
Experience Required: 6–8 Years
Location: Brampton, ON – Hybrid (2–3 Days WFO)
Role Description
Responsibilities
- Perform day-to-day vulnerability management activities across infrastructure, endpoints, servers, network devices, applications, and cloud environments.
- Configure, execute, and monitor vulnerability scans using tools such as Qualys VMDR, Tenable/Nessus, or equivalent platforms.
- Analyze vulnerability scan results, validate findings, eliminate false positives, and assess associated security risks.
- Prioritize vulnerabilities based on severity, exploitability, asset criticality, exposure, and business impact.
- Work with technology and application teams to coordinate and track vulnerability remediation activities.
- Monitor remediation progress against defined SLAs and escalate overdue or high-risk vulnerabilities.
- Support vulnerability exception/risk acceptance processes and maintain appropriate documentation.
- Generate vulnerability management dashboards, metrics, and executive-level reports.
- Investigate emerging vulnerabilities and assess their potential impact on the organization's technology environment.
- Support vulnerability assessments following major security advisories, zero-day vulnerabilities, and actively exploited vulnerabilities.
- Identify trends and recurring vulnerabilities and recommend improvements to reduce the organization's overall vulnerability exposure.
- Assist with vulnerability management process improvements, automation, and optimization of scanning coverage.
- Maintain accurate records of assets, vulnerabilities, remediation status, and exceptions.
Essential Skills
Required Skills & Experience
- 3+ years of experience in Vulnerability Management, Cybersecurity, Information Security, or a related discipline.
Hands-on experience with one or more vulnerability management platforms, preferably:
- Qualys VMDR / Qualys Vulnerability Management
- Tenable Vulnerability Management / Nessus
- Rapid7 InsightVM or equivalent tools.
- Qualys VMDR / Qualys Vulnerability Management
- Strong understanding of vulnerability assessment methodologies and vulnerability lifecycle management.
- Good knowledge of CVSS, CWE, CVE, CPE, vulnerability severity, and risk-based prioritization.
- Understanding of operating systems, networking, databases, web applications, and common enterprise infrastructure technologies.
- Experience analyzing vulnerability findings and working with technical teams to determine appropriate remediation actions.
- Strong understanding of patch management and vulnerability remediation processes.
- Ability to interpret vulnerability reports and translate technical findings into actionable remediation recommendations.
- Strong communication, analytical, and stakeholder-management skills.
Preferred Qualifications
- Experience with vulnerability management across on-premises, cloud, and hybrid environments.
- Knowledge of AWS/Azure/GCP security and cloud vulnerability management.
- Familiarity with CISA KEV, threat intelligence, and actively exploited vulnerabilities.
- Experience with vulnerability remediation tracking and security dashboards.
- Exposure to scripting/automation using Python, PowerShell, or similar technologies.
Journal
Only you can see this. Kept on this device, and in your account when you sign in.